Debian Security Advisory DSA 484-1 – Steve Kemp discovered a vulnerability in xonix, a game, where an external program was invoked while retaining setgid privileges. A local attacker could exploit this vulnerability to gain gid games.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33091/dsa-484.txt
Source: https://packetstormsecurity.com/files/33091/dsa-484.txt.html